Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: jobayer534 Clear all filters
TI-2025-11799 CVE-2025-12880 · GHSA-79wj-q85x-crhp

Progress Bar Blocks for Gutenberg <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

Priority LOW 24

The Progress Bar Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00175 Published 2025-11-11 No fix listed CWE-79